Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: f+XN3mKHfF82Q9rSwFqy80Pbd/OqamQWf6Rv1TCqTvs=
Subject key identifier: 19:EB:39:8C:1D:7F:75:AC:CF:5B:C2:95:91:66:D6:1E:CD:8B:EE:D7
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 0196C270208B111ED5AE3389088C4D256D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 04E2
Signing time: Mon 12 May 2025 03:00:50 +0000
Manifest this update: Mon 12 May 2025 03:00:50 +0000
Manifest next update: Tue 13 May 2025 03:00:50 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: L5cUOde7bwDwzAytrdgleR70cPwrzRwKwB3RMIkO1CU=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:20:8b:11:1e:d5:ae:33:89:08:8c:4d:25:6d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: May 12 03:00:50 2025 GMT
Not After : May 13 03:00:50 2025 GMT
Subject: CN=19eb398c1d7f75accf5bc2959166d61ecd8beed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:df:91:7f:0d:81:27:96:3a:2b:00:1f:df:
fb:69:73:23:1f:bb:06:1d:7b:7e:51:fb:c0:b9:ce:
8d:cb:72:80:36:55:68:9d:a1:cd:76:93:41:a5:54:
b1:22:d7:f4:15:ac:dd:63:4f:7e:83:be:b9:21:e4:
04:2c:9f:63:8c:be:2c:ed:54:8d:4b:e7:e5:a6:67:
0e:aa:fa:1d:7e:69:6d:91:78:7e:fd:42:35:01:06:
21:12:ea:60:17:6d:29:e6:ee:86:6b:25:40:8c:33:
8b:7b:ae:9b:93:91:8a:07:65:98:fd:0c:66:44:6b:
12:a3:bc:cf:3a:bd:f9:c1:3e:f9:1c:ad:0c:78:b1:
a9:39:59:26:15:97:4c:31:da:df:f6:db:e4:02:37:
7a:c1:40:91:63:74:c7:a4:c8:78:e9:e6:82:a1:47:
e0:07:3f:bb:2f:08:47:03:1d:05:c4:35:15:be:3c:
f4:f1:d3:97:ca:3d:68:0a:bf:77:e8:51:77:93:9d:
e3:b8:b2:cc:12:ad:cb:73:4e:8e:cf:4c:86:1d:a2:
9c:6a:ac:f0:a6:92:3d:2c:fe:30:a6:2e:8a:a9:4e:
b1:f6:33:4c:c7:ee:ab:3c:5d:a8:1f:cc:42:b2:20:
65:12:03:d2:93:7c:29:ce:83:59:57:04:7f:79:55:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EB:39:8C:1D:7F:75:AC:CF:5B:C2:95:91:66:D6:1E:CD:8B:EE:D7
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9d:a7:c8:4a:f0:26:77:c1:81:a6:28:3a:c5:fd:c8:6f:fb:
71:47:1a:92:33:40:a0:e2:ec:04:c8:6e:1d:50:f6:92:5a:8f:
d1:c9:85:e0:a0:26:56:d0:01:11:2a:9e:35:73:4d:1a:96:2f:
b7:91:f0:30:33:a5:e1:6f:be:10:a8:1b:fe:1b:ea:27:da:57:
fd:30:b6:69:3a:d5:ac:11:2e:89:ac:ad:78:3e:c5:41:bb:02:
56:02:d0:eb:1c:01:db:1d:a5:f3:7b:f0:1b:ef:b3:c7:82:59:
89:de:9d:3a:40:c2:f0:b2:ba:8b:85:c8:e7:ef:6b:8b:a2:e7:
0f:32:a7:7d:19:ae:2a:c1:2e:05:d3:26:b5:69:72:08:12:74:
1b:e3:e6:96:a0:06:2b:23:39:57:86:2e:85:55:33:99:99:39:
f2:10:05:b5:31:0c:9d:12:42:54:0b:85:fe:5a:82:fd:bb:48:
b7:1a:28:08:b6:67:6f:3a:be:8b:39:2c:81:34:82:41:f9:0e:
16:86:84:1a:72:ec:21:36:6c:d4:4e:d9:25:d2:34:b6:d3:c1:
05:db:5d:5d:ff:48:29:28:c9:5f:42:20:a8:61:e5:ca:5e:fd:
5c:18:bc:65:d7:11:44:b0:c4:0d:1a:95:51:a6:70:42:4e:77:
7e:c5:ea:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:49:34 2025 by rpki-client